Categories: Data BreachHacks

80 Million U.S Households Sensitive Personal Data Exposed Online From Unprotected Mystery Database

An unknown mystery database exposed nearly 80 million U.S households data that impacting up to 65% of US households.

Security Researchers Noam Rotem and Ran Locar uncovered the 24 GB database which is hosted by a Microsoft cloud server.

The database contains highly sensitive data that belongs to U.S peoples who are living in each household with their full names, their marital status, income bracket, age, and more.

This is not a first incident that related to the households data leak, two years back, a massive database that contains 123 Million American households sensitive personal information leaked online by California-based data analytics firm.

but this leak contains some of the depth information included peoples’ names, addresses, and income which is more valuable for cybercriminals if they reach this database.

According to vpnmentor report, The database seems to itemize households rather than individuals. It includes:

  • Full addresses, including street addresses, cities, counties, states, and zip codes
  • Exact longitude and latitude
  • Full names, including first, last, and middle initial
  • Age
  • Date of birth

Apart from this, additionally the researches discovered coded references to title, gender, marital status, income, homeowner status, and dwelling type. 

The personal data that exposed by this data leak leads to the victims falling in various cyber attacks including Spam and phishing that brings sophisticated attack via malware and ransomware.

“This made us suspect that the database is owned by insurance, healthcare, or mortgage company. However, information one may expect to find in a database owned by brokers or banks is missing. For example, there are no policy or account numbers, social security numbers, or payment types.” VPNMentor said.

Microsoft statement said, “We have notified the owner of the database and are taking appropriate steps to help the customer remove the data until it can be properly secured,” but Microsoft declined to reveal the customer of this unprotected database.

You can follow us on LinkedinTwitterFacebook for daily Cybersecurity updates also you can take the Best Cybersecurity courses online to keep your self-updated.

Also Read:

Fashion Retailer FOREVER 21 confirms Payment Card details stolen in the Security Breach

Nissan Canada Data Breach May have Exposed more than 1 Million Customers Data

31 Million Data Leaked Online Reveal that keyboard App Collects Everything from Contacts to Keystrokes

Balaji

BALAJI is an Ex-Security Researcher (Threat Research Labs) at Comodo Cybersecurity. Editor-in-Chief & Co-Founder - Cyber Security News & GBHackers On Security.

Recent Posts

Lotus Blossom Hacker Group Uses Dropbox, Twitter, and Zimbra for C2 Communications

The Lotus Blossom hacker group, also known as Spring Dragon, Billbug, or Thrip, has been…

2 hours ago

Squidoor: Multi-Vector Malware Exploiting Outlook API, DNS & ICMP Tunneling for C2

A newly identified malware, dubbed "Squidoor," has emerged as a sophisticated threat targeting government, defense,…

2 hours ago

Unpatched Vulnerabilities Attract Cybercriminals as EDR Visibility Remains Limited

Cyber adversaries have evolved into highly organized and professional entities, mirroring the operational efficiency of…

2 hours ago

Threat Actors Attack Job Seekers of Fortune 500 Companies to Steal Personal Details

In Q3 2024, Cofense Intelligence uncovered a targeted spear-phishing campaign aimed at employees working in…

2 hours ago

DragonForce Attacks Critical Infrastructure to Exfiltrate Data and Halt Operations

The DragonForce ransomware group has launched a significant cyberattack on critical infrastructure in Saudi Arabia,…

2 hours ago

New Malware Uses Legitimate Antivirus Driver to Bypass All System Protections

In a concerning development, cybersecurity researchers at Trellix have uncovered a sophisticated malware campaign that…

2 hours ago